General

  • Target

    3814c8a4a3d282b1c6e30714cfff88d75f4bf95c2c4d12a53eccf3d81ba7cbe7

  • Size

    1.4MB

  • Sample

    230505-wxy3taef2s

  • MD5

    a7fdec49896dc16299fa7bb46fb17fab

  • SHA1

    f1327bd732875b6b0e3f2a701909badae539d183

  • SHA256

    3814c8a4a3d282b1c6e30714cfff88d75f4bf95c2c4d12a53eccf3d81ba7cbe7

  • SHA512

    b6fb402f5172902dc3d7af9a4584df8aa88edd1b611564b2bbcdf9955d080d4cb966760024cde4816725fcfe55ecffd06f7ec2927003850efd5d300f96fb5157

  • SSDEEP

    24576:mGU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRTu5h4Sa:1pEUIvU0N9jkpjweXt7765CH

Malware Config

Extracted

Family

socelars

C2

https://hdbywe.s3.us-west-2.amazonaws.com/uysf428/

Targets

    • Target

      3814c8a4a3d282b1c6e30714cfff88d75f4bf95c2c4d12a53eccf3d81ba7cbe7

    • Size

      1.4MB

    • MD5

      a7fdec49896dc16299fa7bb46fb17fab

    • SHA1

      f1327bd732875b6b0e3f2a701909badae539d183

    • SHA256

      3814c8a4a3d282b1c6e30714cfff88d75f4bf95c2c4d12a53eccf3d81ba7cbe7

    • SHA512

      b6fb402f5172902dc3d7af9a4584df8aa88edd1b611564b2bbcdf9955d080d4cb966760024cde4816725fcfe55ecffd06f7ec2927003850efd5d300f96fb5157

    • SSDEEP

      24576:mGU0HpRGUYHKaPUM0Hqy69NgA+iVvRuPpND5TqJ6y5eXt7dRTu5h4Sa:1pEUIvU0N9jkpjweXt7765CH

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops Chrome extension

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks